Code Reviewer Ai MCP Server

This MCP server has a critical dependency on an external authentication middleware located at a hardcoded absolute path (~/clawd/meok-labs-engine/shared), which represents a severe security risk. The code uses dangerous patterns including regex-based security scanning that produces false positives, implements its own rate-limiting rather than relying on proven mechanisms, and lacks input validation for the code being scanned. Additionally, the authentication mechanism is completely opaque to auditors and may be trivial to bypass. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.